The current implementation does not sanitize headers or values. Attackers could exploit this to inject malicious headers (e.g., via newline characters).
- Add sanitization to prevent injection attacks.
- Reject headers with invalid characters or formats.